One contractor “was in Argentina and his co-worker was physically located in the [People’s Republic of China]. Both had direct access to every row of data in every database: they were root. Another team that worked with these databases had at its head two team members with PRC passports. I know that because I challenged them personally and revoked their privileges. From my perspective, OPM compromised this information more than three years ago.”

Archuleta, having taken her post 18 months ago, said encryption was “not feasible” on the dated network her agency was operating on. She did say her office was currently working to encrypt its data.